Differences between revisions 1 and 19 (spanning 18 versions)
Revision 1 as of 2004-10-27 18:48:04
Size: 2021
Editor: h80n2fls33o887
Comment:
Revision 19 as of 2005-04-02 01:23:06
Size: 2595
Editor: UlfLamping
Comment: fix/add links
Deletions are marked like this. Additions are marked like this.
Line 3: Line 3:
MEGACO is used to control a Media GAteway in a VoIP system, MEGACO can be Text or Binary encoded. MEGACO is used to control a Media Gateway in a VoIP system. MEGACO can be Text or Binary (ASN.1) encoded.
Line 8: Line 8:
 * ["M3UA"]: MEGACO can use ["M3UA"] as its transport protocol, if M3UA is used there is an indication in the M3UA part that this is
MEGACO
. 
 * ["MTP3"]: MEGACO can use ["MTP3"] as its transport protocol; MEGACO is indicated in MTP3 by the service indicator 14.
Line 11: Line 10:
 * ["SCTP"]: Typically(?) MEGACO uses ["SCTP"] as its transport protocol, MEGACO is indicated in SCTP.  * ["SCTP"]: Typically(?) MEGACO uses ["SCTP"] as its transport protocol; MEGACO is indicated in SCTP by a payload protocol ID of 7.
Line 13: Line 12:
 * ["TCP"]: MEGACO can use ["TCP"] as its transport protocol. The well known TCP port for MEGACO traffic is xx, if TCP is used
a TPKT header must be included.
 * ["TCP"]: MEGACO can use ["TCP"] as its transport protocol. The well known TCP port for MEGACO traffic is 2944; if TCP is used, a ["TPKT"] header must be included.
Line 16: Line 14:
 * ["UDP"]: MEGACO can use ["UDP"] as its transport protocol. The well known UDP port for MEGACO traffic is xx

 * ["SCTP"]: Typically(?) MEGACO uses ["UDP"] as its transport protocol.
 * ["UDP"]: MEGACO can use ["UDP"] as its transport protocol. The well known UDP port for MEGACO traffic is 2944
Line 22: Line 18:
XXX - Add example traffic here (as plain text or Ethereal screenshot). H.248 over SCTP [attachment:H.248decoded.gif decoded] by Ronnie Sahlberg's decoder in the 0.10.9-SVN-13213 build.
Line 26: Line 22:
The MEGACO dissector works for TEXT encoding of the protocoll if EOL is used as SEParator. Also add info of additional Ethereal features where appropriate, like special statistics of this protocol. The MEGACO dissector works for TEXT encoding of the protocol if EOL is used as SEParator. Dissection of binary encoding has recently been added (2004-10-25) as a separate dissector, it now handles binary H248 ower M3UA and SCTP in case of SCTP "decode as" may have to be used as the TEXT encoding dissector may take precedence.

If TCP is used there may be issues with desegmentation; such traces would be valuable.
Line 29: Line 27:

(XXX add links to preference settings affecting how PROTO is dissected).
 * You can change the ports on which MEGACO is dissected for UDP/TCP
 * You can specify whether the raw text of MEGACO packets is to be displayed
 * You can specify whether a detailed dissection of MEGACO packets is to be displayed
Line 37: Line 36:
A complete list of PROTO display filter fields can be found in the [http://www.ethereal.com/docs/dfref/PROTO/PROTO.html display filter reference] A complete list of MEGACO display filter fields can be found in the [http://www.ethereal.com/docs/dfref/m/megaco.html display filter reference]
Line 39: Line 38:
 Show only the PROTO based traffic: {{{
 PROTO }}}
 Show only the MEGACO based traffic: {{{
 megaco }}}
Line 44: Line 43:
You cannot directly filter PROTO protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one. You cannot directly filter MEGACO protocols while capturing. However, if you know the ["TCP"] or ["SCTP"] port used (see above), you can filter on that one.
Line 48: Line 47:
 * add link to PROTO specification and where to find additional info on the web about PROTO
 * [http://www.ietf.org/rfc/rfc3015.txt RFC3015] ''Megaco Protocol Version 1.0''
 * [http://www.ietf.org/rfc/rfc3525.txt RFC3525] ''Gateway Control Protocol Version 1'' (MEGACO version 2)
 * [http://www.iana.org/assignments/megaco-h248 IANA Megaco assignments]
 * ITU-T Rec. H.248.1

Media Gateway Control Protocol (MEGACO/H.248.1)

MEGACO is used to control a Media Gateway in a VoIP system. MEGACO can be Text or Binary (ASN.1) encoded.

History

Protocol dependencies

  • ["MTP3"]: MEGACO can use ["MTP3"] as its transport protocol; MEGACO is indicated in MTP3 by the service indicator 14.
  • ["SCTP"]: Typically(?) MEGACO uses ["SCTP"] as its transport protocol; MEGACO is indicated in SCTP by a payload protocol ID of 7.
  • ["TCP"]: MEGACO can use ["TCP"] as its transport protocol. The well known TCP port for MEGACO traffic is 2944; if TCP is used, a ["TPKT"] header must be included.
  • ["UDP"]: MEGACO can use ["UDP"] as its transport protocol. The well known UDP port for MEGACO traffic is 2944

Example traffic

H.248 over SCTP [attachment:H.248decoded.gif decoded] by Ronnie Sahlberg's decoder in the 0.10.9-SVN-13213 build.

Ethereal

The MEGACO dissector works for TEXT encoding of the protocol if EOL is used as SEParator. Dissection of binary encoding has recently been added (2004-10-25) as a separate dissector, it now handles binary H248 ower M3UA and SCTP in case of SCTP "decode as" may have to be used as the TEXT encoding dissector may take precedence.

If TCP is used there may be issues with desegmentation; such traces would be valuable.

Preference Settings

  • You can change the ports on which MEGACO is dissected for UDP/TCP
  • You can specify whether the raw text of MEGACO packets is to be displayed
  • You can specify whether a detailed dissection of MEGACO packets is to be displayed

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.

Display Filter

A complete list of MEGACO display filter fields can be found in the [http://www.ethereal.com/docs/dfref/m/megaco.html display filter reference]

  • Show only the MEGACO based traffic:

     megaco 

Capture Filter

You cannot directly filter MEGACO protocols while capturing. However, if you know the ["TCP"] or ["SCTP"] port used (see above), you can filter on that one.

Discussion

H248/MEGACO (last edited 2010-05-24 19:34:29 by BillMeier)